Is NordVPN - a VPN proxy extension for Firefox safe?

Clean risk

NordVPN sends persistent device fingerprint and ISP metadata to its telemetry servers and loads feature-flag configuration from a remote CDN.

The extension collects a persistent device identifier along with OS, screen resolution, time zone, country, ISP name, and ISP ASN, and transmits these to applytics.nordvpn.com via its Moose telemetry library. Certain fields marked as essential are sent regardless of the user's consent selection. Additionally, the extension fetches a JSON configuration file from downloads.nordcdn.com that controls over 50 feature flags, including proxy domains and telemetry parameters, without subresource integrity verification.

NordVPNv5.6.5Firefox Add-ons
0Risk

AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.

Publishers can request a review.

Data recipients

applytics.nordvpn.comdownloads.nordcdn.comapi.nordvpn.com
Updated 17 September 2026amo-872622